Scams

Finding love on OkCupid: good. Getting scammed out of thousands of dollars on OkCupid: not so much.

Unfortunately for Michael Picciano, he falls into the latter category. Picciano is now suing OkCupid and its parent company, IAC, for failing to conduct “even minimal screening of its subscribers and therefore deceptively creating the impression that their dating service was safe . . . when in fact . . . [it] was a trap for the unwary,” he says in his Manhattan civil suit.

It all began back in February 2013, when he received a message from “genuineguy62.” (Is it just me or is that, like, the least trustworthy name ever?) After 10 days of chatting on the site, Picciano continued the conversation with the man, who called himself Bruce Thompson, via personal e-mails. A month following that, Thompson made his first telephone call to Picciano. And by the end of March, the two had canceled their OkCupid subscriptions because “they had found each other.”

Shortly afterwards, Thompson asked Picciano to wire him money to cover “unexpected fees ”incurred while setting up a new computer parts business. Picciano says he made four wire transfers in steadily increasing amounts to addresses in Texas, Ontario and England. In total, the payments added up to $70,460.

Four weeks following his first payment, Picciano involved the police. A friend of his had found Thompson's photo and information on a site called MaleScammers.com and warned Picciano. Picciano handed over a $100,000 forged check given to him by Thompson to the police, but they were unable to find the con man’s fingerprints.

Picciano is faulting OkCupid for failing to "exercise reasonable care" in communicating "the dangers associated with online matchmaking." There is, however, a page on the site called "Safety Tips" that explicitly warns members against wiring money to other users – or anyone they meet online – because the sender “has no protections against loss.”

In addition to going after OkCupid, Picciano is also suing Capital One for "failure to comply with proper procedures for the transmission of wire funds transfers." The lawsuit allages that none of the wire transfers contained the address of the recipient "as required by law."

According to the court papers, Picciano believes Thompson is back on OkCupid, trolling for new victims under the screen name "bigheartedbt.” While this hasn’t been confirmed, OkCupid users should take note – better safe than sorry.

Christian Mingle, a popular niche dating sites for religiously inclined singles, learned that one of its members was swindled out of a substantial amount of money from another user of the site.

A 66 year-old divorcee from Santa Fe revealed that she had been emailing with a man through the site who wooed her with flowers, text messages and phone calls. Pretending to be a U.K. citizen named David Holmes who was working on a Scottish oil rig, authorities discovered the suitor was actually Nigerian. According to authorities involved with the case, he did not seem to have a noticeable Nigerian accent.

The Santa Fe woman wired money to Holmes in increments at first totaling $300,000. She contacted authorities after she sent her last check for $200,000 to a Turkish bank account. A hold was placed on the check, and soon after a man named Wisdom Onokpite turned up to withdraw the funds. He was arrested, and authorities assumed they had caught the scammer, but it turned out he was only an associate sent to collect the money. The suspect calling himself David Holmes is still at large.

The woman claimed she had given more than half a million dollars to Holmes to invest in a fictitious oil rig. Authorities confirm they were able to get some of the money back, but not all of it.

Deputy District Attorney Cherie Bourland warned that people need to be more careful on international online dating sites, especially older daters who seem to be the target of a majority of fraud cases.

"You get the love drug in you and you end up getting duped," Bourland said.

As for daters on Christian Mingle and other online dating sites, it's good to use caution and common sense when interacting with strangers. Following are some tips to avoid being catfished yourself:

Don't share personal information. Don't give out your last name, home or work address, or any other personal information to someone on an online dating site. Remember that you don't know each other, and the person behind the profile could be lying.

Don't share financial information. This is especially important, because typically online daters who become victims of fraud do this after they have had some communication and built up a sense of trust. But if an online dater asks you for money, remember: always say no, even if your suitor is wooing you with phone calls, flowers, or messages of love. If you haven't met in person, be especially careful of declarations of love.

Meet in a public place. Never meet an online date at your home, always meet in a public place. You don't know this person or his intentions, so don't take unnecessary risks. Also, let a friend know where you are. Be safe and have fun!

Somewhere in the back of our heads, rattling around with all the other information we ignore like "You really shouldn't drink that last shot of tequila," we know that having an online account means accepting the risk that that account might be hacked. But no matter how many times we hear horror stories of it happening to someone else, we never quite believe it could happen to us.

Imagine the surprise, then, that Cupid Media users must have felt when the service was hacked early in 2013 and the names, e-mail addresses, and plaintext passwords for 42 million accounts were exposed. Ouch. That has gotta sting.

Ars Technica reports that "The cache of personal information was found on the same servers that housed tens of millions of records stolen in separate hacks on sites including Adobe, PR Newswire, and the National White Collar Crime Center." An official from Cupid Media explained that the hack appeared to be connected to "suspicious activity" that was detected on the site in January and officials say they believe they have notified all affected users, but those actions and explanations are likely to do little to appease users whose personal information has been compromised.

The Cupid Media hack will go down in history as one of the largest passcode breaches on record so far, a dubious distinction made even worse by the fact that the data was in plaintext, rather than a cryptographically protected format that requires significant effort to crack. Because many Internet users reuse the same passwords on multiple websites, a hack on this scale can give thieves instant access to tens of thousands of sensitive accounts tied to a user's e-mail address.

"Making matters worse," Ars Technica speculates, "many of the Cupid Media users are precisely the kinds of people who might be receptive to content frequently advertised in spam messages, including male enhancement products, services for singles, and diet pills."

And making matters even worse than that, a review of the Cupid Media user records that were exposed reveals that a significant portion of them were protected with weak passwords in the first place. More than 1.9 million accounts were protected with the password "123456." Another 1.2 million used "111111." How is it that, in this day and age, there are still people who think those are secure passwords? Have they never seen the Internet before?

Take note, online daters: the more random your password is, the safer it is. And please, please, never use the same password on multiple sites.

On the internet, we tend to be skeptical of anything that looks too good to be true - because, quite frequently, it is. Thus, when you encounter a profile that seems to hit all the right notes with you, it’s not a bad idea to copy and paste a bit into an internet search; is this really a great writer or a one-size-fits-all winner?

Don’t be shocked if your search returns more than one hit; after all, many people sign up for multiple sites, and it stands to reason that they’d crib from their own work for at least some of it. However, if the name, location, and general stats are all drastically different, but the profile itself is identical, it might be time to ask some difficult questions.

That being said, every plagiarized work has to come from somewhere, right? It may not be incredibly likely that you’ve stumbled upon the original author, but the chance does exist. If you’re willing to give your potential match a chance regardless of their questionable profile ethics, tread carefully and critically - do your email interactions sound like the same “voice”? Does this person display any other red flags you might otherwise normally ignore? You can also try the direct approach: ask them point-blank, “Are you aware this profile is used elsewhere on the internet in x different locations?”

If your profile has been sitting unchanged for some time, there’s also a chance you’ve unwittingly been copied elsewhere. Try doing a search for your own profile; you might be surprised at what comes up! The chance of being mistaken for a plagiarizer, or worse, a scammer, is yet another reason to update your profile regularly. And eluding a search engine shouldn’t be your only focus; your profile may have been great when you first wrote it years ago, but does it accurately reflect who you are today? Remember, you want someone to be interested in you as you are now, not a previous version.

An internet search engine seems like an unlikely companion in online dating, but it can be a great ally. Not only can it be an aid in assessing your own gut instincts, it can prevent you from some embarrassment of your own.

2013 didn't start out well for Cupid plc, the top-5 global online dating company that's responsible for a network of dating sites including Cupid.com. Cupid came under fire for allegedly using fake profiles to boost its membership, after the BBC claimed that members of Cupid's online dating services suspected fake "flirtatious" messages were being used to encourage free users to sign up for paid subscriptions.

Cupid plc denied using fakes and said it was cleared of the allegations by auditors. According to Cupid, the auditors found "no evidence of a company organised practice of staff enticing registered members to subscribe through the use of fake profiles."

The experiences of members and undercover investigators suggest otherwise, and users are still (rightfully) suspicious, but some good news has finally come out of the Cupid camp.

Cupid recently launched 'safe mode' functionality for its network of dating sites. The update still allows users to choose who they want to interact with, but provides the added security of being able to filter out members who choose not to verify themselves on the site. With 'safe mode' on, you can contact any user but will only receive communications from members who have undergone the verification process. Unverified users are welcome to continue using the site, but are encouraged to become "Trusted Members" to unlock access to people already using 'safe mode.'

For some reason, at this point, 'safe mode' is only available for male users and only female members are asked to become verified. Cupid hopes that the new technology will create a "smoother" and "more positive" online experience for its users and...well...I certainly can't blame them for hoping. Cupid needs any boost it can get at this point.

"We have listened to our customers and to dating website users in general," says Sean Wood, Communications Director at Cupid plc. "The main goal here is to give our customers choice to decide who they communicate with. This means they can choose verified users only or indeed if they feel comfortable with communicating more widely, then they have that ability too. Our members can use the sites secure in the knowledge that they are in a safe environment where they can get on with enjoying the experience, making contacts and meeting up."

Right. So...Cupid customers are safe from each other, but the real question is: are they safe from Cupid itself?

"If it sounds too good to be true, it probably is" is solid advice for most every situation, but it rings especially true online. Anyone who has ventured into the untamed Wild West of online dating knows that it comes with certain risks.

Chief among them is the possibility of being ripped off by an unscrupulous Internet scammer. Your rational side knows it's a possibility, but for the most part it's a fear that's relegated to the deeper, darker recesses of your mind. A far as you're concerned, getting scammed is something that happens to other people in the cautionary tales told on the local news. It's not going to happen to you, right?

Odds are in your favor, but it never hurts to be prepared. SeekingArrangement.com recently posted a report called The Face of Fraud to help online daters separate the catches from the catfish. The site reviewed the profiles of 60,000 banned accounts, and discovered that fake profiles tend to have a few things in common. Here are 7 signs you might be looking at the profile of a scam artist: